I don’t think this was so much a privacy concern as it was a bit challenging in terms of revoking keys and they, like they often do, opted for a basic implementation first to be refined later.